TippingPoint Threat Intelligence and Zero-Day Coverage – Week of August 28, 2017

The only topic I can bring up this week is the devastation in Texas caused by Hurricane Harvey. Many cities have been completely destroyed and to add insult to injury, Harvey moved back to the Gulf of Mexico and made landfall again in Louisiana. Catastrophic flooding has left tens of thousands...

Managing Security in a DevOps Environment

DevOps is a software development practice in which development and operations engineers collaborate during the entire product lifecycle. With the adoption of DevOps at mainstream levels, we now see security starting to take a bigger role in DevOps’ day-to-day responsibilities. From a security...

Mobile WireX DDoS Botnet 'Neutralized' by Collaboration of Competitors

A collaboration between leading content delivery networks and technology companies—some of them competitors—is in the midst of shutting down the largest botnet of mobile devices ever recorded. The WireX botnet was detected on Aug. 17 after businesses in a number industries, most notably...

Tech Firms Team Up to Take Down ‘WireX’ Android DDoS Botnet

A half dozen technology and security companies -- some of them competitors -- issued the exact same press release today. This unusual level of cross-industry collaboration caps a successful effort to dismantle 'WireX,' an extraordinary new crime machine comprising tens of thousands of hacked...

The WireX Botnet: An example of cross-organizational cooperation

Introduction On August 17th, 2017, multiple Content Delivery Networks CDNs and content providers were subject to significant attacks from a botnet dubbed WireX. The botnet is named for an anagram for one of the delimiter strings in its command and control protocol. The WireX botnet comprises...

IBOS open source latest version of MailController.php page actionIndex function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionIndex function on the MailController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the...

IBOS Enterprise Collaboration Management Software PersonalController.php page actionAdd function has a file upload vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A file upload vulnerability exists in the actionAdd function on the PersonalController.php page of the IBOS Enterprise Collaboration Management Software. An attacker can exploit the...

IBOS Enterprise Collaboration Management Software AssignmentfinishedController.php page actionIndex function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionIndex function on the AssignmentfinishedController.php page of IBOS Enterprise Collaboration Management Software. An attacker can exploit the...

Fuze Patches TPN Handset Vulnerabilties

Fuze, a maker of popular enterprise-grade voice-over-IP handsets, earlier this year patched three vulnerabilities that exposed user account information and enabled unauthorized authentication. The issues were made public today by researchers at Rapid7 who privately disclosed the flaws on April 12...

Cisco Prime Collaboration Provisioning Tool Arbitrary File Write Vulnerability

Cisco Prime Collaboration Provisioning Tool is a set of Web-based, next-generation communications services tools from Cisco. The tool provides IP communication services capabilities for IP telephony, voice mail, and unified communications environments. upgradeManager is one of the upgrade manager...

[SECURITY] Fedora 26 Update: subversion-1.9.7-1.fc26

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

IBOS Enterprise Collaboration Management Software AttachController.php page actionUpload function has a file upload vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A file upload vulnerability exists in the actionUpload function on the AttachController.php page of the IBOS Enterprise Collaboration Management Software. An attacker can exploit the...

IBOS Enterprise Collaboration Management Software MyshareController.php page actionShare function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionShare function on the MyshareController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the...

IBOS Enterprise Collaboration Management Software CompanyController.php page actionDel function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionDel function on the CompanyController.php page of IBOS Enterprise Collaboration Management Software. Allows attackers to exploit the...

IBOS Enterprise Collaboration Management Software NotifyController.php page actionDetail function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionDetail function on the NotifyController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the...

[SECURITY] Fedora 25 Update: subversion-1.9.6-2.fc25

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

CVE-2017-6759

A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary files as root on the system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

CVE-2017-6756

A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of defense against cross-site request forgery CSRF attacks. An attacker could...

Input validation

A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary files as root on the system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

CVE-2017-6756

The CVE-2017-6756 entry describes a CSRF vulnerability in the Web UI Application of Cisco Prime Collaboration Provisioning Tool (PCPT) up to version 12.2. An unauthenticated, remote attacker could induce a user’s browser to perform actions authorized for that user, enabling partial impact to conf...